Behavioral task
behavioral1
Sample
2870f807d7b068f66912a500ba1c0e98.exe
Resource
win7-20230712-en
Behavioral task
behavioral2
Sample
2870f807d7b068f66912a500ba1c0e98.exe
Resource
win10v2004-20230703-en
General
-
Target
2870f807d7b068f66912a500ba1c0e98.exe
-
Size
45KB
-
MD5
2870f807d7b068f66912a500ba1c0e98
-
SHA1
2de5d2ca4cd2ead614d0ffe8d15a0c31910105f1
-
SHA256
3dd3f34a78625e26620c12305fb32860956df9cf00a162466dc6fdcbf14bf52b
-
SHA512
c12d14a6fe40a24bfe654ddb6e6fa48e820c5d1b00300fa2302be623c35473c731ee00846195b1b598e51b7344af91176c9ef2cb39406333aac296450441957e
-
SSDEEP
384:K9VD6tee+qUOTd2opQTLAdz1SvNmhpdvOjT7PbA6HBiTSnjxZMdP05ldpRMaYIBI:k6Qe+qUv8zcqdvOXA6XkPslJvGaVW
Malware Config
Signatures
-
Smokeloader family
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2870f807d7b068f66912a500ba1c0e98.exe
Files
-
2870f807d7b068f66912a500ba1c0e98.exe.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 29KB - Virtual size: 29KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE